API gateways are primarily used for HTTP traffic coming from clients external to your backend services eg. an iOS device (hence the term 'gateway' vs. 'mesh'). I don't think they support thrift or grpc (at least aws doesn't, not sure about other providers).
https://aws.amazon.com/api-gateway/
That can work, but it means you simply outsourced the problem to AWS. It's not a bad idea per se, but it means your service needs to talk, in some way, http.
You could use the service mesh thing from AWS, along with cognito jwts, for authenticatetion and authorization
We want to automate everything not related to the code we want to write. Service meshes sound like a good way to do that.